The Unintentional Enabler: How Cloudflare Services are Abused for Credential Theft and Malware Distribution Cloudflare services — particularly Workers and Tunnels — are being abused by threat actors to host convincing AiTM phishing pages and to stage covert connections that deliver malware, including Xeno RAT and XWorm RAT. These attacks leverage trusted Cloudflare domains and free tiers (e.g., *.workers[.]dev, *.trycloudflare[.]com, *.pages[.]dev, *.r2[.]dev) to bypass email and network defenses and evade detection. #XenoRAT #XWormRAT

Cloudflare Workers and Tunnels are being exploited to host AiTM phishing pages and deliver malware like Xeno RAT and XWorm RAT, leveraging trusted domains to evade defenses and detection. #CredentialTheft #CloudAbuse #MalwareDelivery

Fake Interview Tools Target Web3 Developers
Read More: buff.ly/HzD0ERY

#Web3Security #FakeJobScams #InboundSocialEngineering #CryptoDeveloper #WalletTheft #MalwareDelivery #CyberCrimeTrends

New ErrTraffic Service Enables ClickFix
Read More: buff.ly/IZL7qyu

#ErrTraffic #ClickFix #SocialEngineering #MalwareDelivery #UndergroundMarkets #CyberCrimeTools #ThreatIntel #UserDeception

CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams The major IT outage caused by CrowdStrike is being leveraged by threat actors for phishing, scams, and malware delivery.

CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams
www.securityweek.com/crowdstrike-...
#Infosec #Security #Cybersecurity #CeptBiro #CrowdStrikeIncident #MalwareDelivery #Phishing #Scams

Microsoft Patches Two Zero-Days Exploited for Malware Delivery Microsoft patches CVE-2024-29988 and CVE-2024-26234, two zero-day vulnerabilities exploited by threat actors to deliver malware.

Microsoft Patches Two Zero-Days Exploited for Malware Delivery
www.securityweek.com/microsoft-pa...
#Infosec #Security #Cybersecurity #CeptBiro #Microsoft #ZeroDays #Exploited #MalwareDelivery